Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
About this summary. This is a short, independently written summary of an article first published by SecurityWeek. Cyber Security News did not report or verify the underlying story. Read the original: https://www.securityweek.com/salesbleed-flaws-in-salesforce-agentforce-enabled-zero-click-data-exfiltration/
Source attribution: headline and facts are from SecurityWeek (securityweek.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new…
Threat Actors Use Google Ads To Target Ledger Users
IntroductionIn August 2026, Zscaler ThreatLabz analyzed a phishing campaign that used fraudulent Google ads to target Ledger hardware wallet users. The ads redirected…
Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script
Yes, criminals have job listings too. A Telegram user recruiting callers to work in an apparent Google Security Team voice-phishing scam told applicants that they…
On Anthropic’s AI Misuse Report
Earlier this month, Anthropic published a long report detailing all of the Claude misuses it detected. Daniel Meissler usefully summarized the report into 117 findings…
Researchers Identify AliExpress Phishing Domains Before Registration
EfficientIP says it flagged AliExpress phishing domains before they were registered
ClaimMirage: When Self-Claims in Domain Names Change LLM Threat Judgments
arXiv:2609.29130v1 Announce Type: new Abstract: Short claims such as not-phishing or official can change how a large language model (LLM) judges a domain name, without…